syzbot

rust_binder: Error while translating object.
rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
Kernel panic - not syncing: corrupted stack end detected inside scheduler
CPU: 1 UID: 0 PID: 864 Comm: syz-executor355 Not tainted syzkaller #0 7d76481da05fb6652dc975f640030f74837f9139
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
 <TASK>
 __dump_stack+0x21/0x30 lib/dump_stack.c:94
 dump_stack_lvl+0x7b/0x1c0 lib/dump_stack.c:120
 dump_stack+0x19/0x20 lib/dump_stack.c:129
 panic+0x2ab/0x710 kernel/panic.c:354
 schedule_debug kernel/sched/core.c:6603 [inline]
 __schedule+0x14d3/0x1fa0 kernel/sched/core.c:7736
 preempt_schedule_common+0x2d/0x60 kernel/sched/core.c:8063
 preempt_schedule+0xc5/0xe0 kernel/sched/core.c:8087
 preempt_schedule_thunk+0x1a/0x40 arch/x86/entry/thunk.S:12
 vprintk_emit+0x589/0x650 kernel/printk/printk.c:2463
 vprintk_default+0x2a/0x40 kernel/printk/printk.c:2477
 vprintk+0x93/0xa0 kernel/printk/printk_safe.c:75
 _printk+0xde/0x140 kernel/printk/printk.c:2487
 <rust_binder_main::transaction::Transaction>::new+0x8e0/0x2810 drivers/android/binder/transaction.rs:95
 <rust_binder_main::thread::Thread>::oneway_transaction_inner drivers/android/binder/thread.rs:1427 [inline]
 <<rust_binder_main::thread::Thread>::oneway_transaction_inner as core::ops::function::FnOnce<(&kernel::sync::arc::Arc<rust_binder_main::thread::Thread>, &rust_binder_main::defs::BinderTransactionDataSg)>>::call_once usr/local/rustup/toolchains/1.91.1-x86_64-unknown-linux-gnu/lib/rustlib/src/rust/library/core/src/ops/function.rs:250 [inline]
 <rust_binder_main::thread::Thread>::transaction::<<rust_binder_main::thread::Thread>::oneway_transaction_inner>+0x323/0xd40 drivers/android/binder/thread.rs:1333
 <rust_binder_main::thread::Thread>::write+0x1a01/0xaf80 drivers/android/binder/thread.rs:1470
 <rust_binder_main::thread::Thread>::write_read drivers/android/binder/thread.rs:1620 [inline]
 <rust_binder_main::process::Process>::ioctl_write_read drivers/android/binder/process.rs:1616 [inline]
 <rust_binder_main::process::Process>::ioctl drivers/android/binder/process.rs:1681 [inline]
 rust_binder_main::rust_binder_ioctl+0x1192/0x5c20 drivers/android/binder/rust_binder_main.rs:460
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0x135/0x1b0 fs/ioctl.c:893
 __x64_sys_ioctl+0x7f/0xa0 fs/ioctl.c:893
 x64_sys_call+0x1878/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:17
 do_syscall_x64 arch/x86/entry/common.c:47 [inline]
 do_syscall_64+0x57/0xf0 arch/x86/entry/common.c:78
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7fecb665a439
Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fecb6622168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fecb6709b68 RCX: 00007fecb665a439
RDX: 0000200000000680 RSI: 00000000c0306201 RDI: 0000000000000004
RBP: 00007fecb6709b60 R08: 00007fecb6622cdc R09: 0000000000000000
R10: 00007fecb6622cdc R11: 0000000000000246 R12: 00007fecb6709b6c
R13: 0000000000000016 R14: 00007fff6e653750 R15: 00007fff6e653838
 </TASK>
Kernel Offset: disabled
Rebooting in 86400 seconds..